CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93007 | MEDIUM | 5.3 | A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93006 | MEDIUM | 6.8 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently us… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-56056 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-52709 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-49142 | HIGH | 8.8 | OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveill… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-48196 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42703 | MEDIUM | 6.5 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39741 | MEDIUM | 5.3 | Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstil… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39735 | MEDIUM | 6.5 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-24533 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-22386 | MEDIUM | 4.3 | Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrect… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118094 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118093 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed all… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118087 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113690 | NONE | — | Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite ver… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113689 | NONE | — | Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite ver… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-113688 | NONE | — | Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-97860 | MEDIUM | 6.7 | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-97854 | CRITICAL | 9.8 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vu… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96767 | HIGH | 7.2 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cro… |
T1078
T1548
|
|
2026-10-29 |